P2Pis not detected-no connection limit possible in syn phase

HI,

My problem is that i want to setup connection limit only for P2P applications, but i can not. This is because i think that P2P applications are detectet AFTER a tcp connection is established, and when a connection is established it couldn’t be blocked by:

chain=forward p2p=allp2p protocol=tcp tcp-flag=syn connection-limit=10,32 action=drop

Even if I mangle P2P connections ( they are established already ) and I can not limit ONLY them. Is there a trick to do this ?


Be healthy Gaby